Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x6beQizs1Ge1XHUWLPmO12Bh4Dg.roa
File: x6beQizs1Ge1XHUWLPmO12Bh4Dg.roa (raw, json)
Hash identifier: oDefLcosyF38thQUYea43/k0pWlz+U0C43iOvPQ5ODI=
Subject key identifier: C7:A6:DE:42:2C:EC:D4:67:B5:5C:75:16:2C:F9:8E:D7:60:61:E0:38
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194EBFB93DCDC2F9DB4F6E4CAEBC55E46D3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x6beQizs1Ge1XHUWLPmO12Bh4Dg.roa
Signing time: Sun 09 Feb 2025 18:32:00 +0000
ROA not before: Sun 09 Feb 2025 18:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 185.220.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 10:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:eb:fb:93:dc:dc:2f:9d:b4:f6:e4:ca:eb:c5:5e:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 9 18:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a6de422cecd467b55c75162cf98ed76061e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:c8:98:f9:cb:86:79:08:18:b0:ec:49:08:
04:f5:76:e9:c0:2c:fd:48:50:1a:55:ca:a6:50:d2:
51:6b:ad:e9:d7:87:ef:eb:f5:d4:ae:85:b6:69:73:
a5:5b:ca:ac:d9:cb:22:31:5c:b6:04:dd:17:2f:b3:
cb:7a:7d:37:60:4e:8c:9d:cd:b2:94:c8:21:e0:9c:
f0:8e:43:17:6d:86:28:09:ab:64:0b:35:8d:bc:2f:
26:4f:f3:28:29:12:b8:48:1e:14:66:6b:69:9b:ac:
d2:37:31:1b:35:81:d0:f7:a4:d1:4a:1d:51:ec:a4:
be:d1:a7:dc:56:6d:61:f3:16:31:a8:89:51:ea:4c:
45:a3:fd:60:5e:cf:88:36:17:68:cc:3c:b0:8a:21:
13:c4:e4:96:9d:04:7a:5f:75:8c:1d:d2:46:ea:b9:
81:18:a3:33:8a:fe:b1:f9:7a:72:ba:d8:d9:ff:df:
f3:58:8c:8b:c0:2b:2e:5c:04:81:62:f2:03:90:78:
97:35:da:eb:b4:cb:55:e6:80:d5:80:78:1e:91:f9:
b1:c8:32:b0:37:35:57:4b:48:ba:26:f0:01:10:33:
2e:ef:2c:0b:43:ce:5b:e1:3a:b8:82:94:b5:47:4c:
a7:d8:58:10:bd:bd:2b:7c:ec:3d:36:0d:d6:62:f4:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:DE:42:2C:EC:D4:67:B5:5C:75:16:2C:F9:8E:D7:60:61:E0:38
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x6beQizs1Ge1XHUWLPmO12Bh4Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b0:2a:e0:59:55:51:ff:71:a9:86:3a:f9:6b:0b:cf:e7:42:
05:0f:80:30:e0:af:80:6a:b1:9e:5f:b5:c0:40:73:c9:34:4a:
dd:6c:a4:11:26:30:07:cf:0e:3c:a9:24:6b:72:b8:38:31:e4:
49:92:b5:b9:73:94:bb:2b:c7:59:79:94:2c:e3:1d:c4:7c:aa:
b2:61:ca:c1:89:e5:1b:89:12:01:a6:52:6e:f1:fd:bb:7b:a4:
94:fa:a0:e5:80:55:79:75:3c:e3:99:1f:a1:19:ee:26:5b:aa:
83:e0:ab:6a:fe:0c:90:00:f9:14:79:bd:d2:41:e7:14:cf:84:
d2:1a:66:08:5d:42:64:51:07:b4:a2:4e:d5:cb:f3:9b:61:a0:
d8:c3:15:a9:07:44:c7:8f:ef:7f:cc:84:5e:16:ed:fb:52:a9:
c5:87:11:a2:f4:d5:86:70:57:ee:43:f2:16:32:1a:b5:99:01:
3d:45:83:b7:c5:f7:a9:d5:97:e7:36:fb:a5:64:81:0c:ee:11:
35:99:41:2a:1e:05:4d:31:44:d3:a8:46:4b:72:8e:f7:32:00:
0e:26:ce:9f:44:df:41:22:42:39:aa:37:ae:da:bd:f9:b9:67:
93:1a:5f:9e:70:d5:0e:70:3f:ce:04:cf:a6:c9:f3:a3:e6:e3:
24:2c:1d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTr+5Pc3C+dtPbkyuvFXkbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMjA5MTgzMjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2E2ZGU0MjJjZWNkNDY3YjU1Yzc1MTYyY2Y5OGVkNzYwNjFlMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW3ImPnLhnkIGLDsSQgE9XbpwCz9
SFAaVcqmUNJRa63p14fv6/XUroW2aXOlW8qs2csiMVy2BN0XL7PLen03YE6Mnc2y
lMgh4JzwjkMXbYYoCatkCzWNvC8mT/MoKRK4SB4UZmtpm6zSNzEbNYHQ96TRSh1R
7KS+0afcVm1h8xYxqIlR6kxFo/1gXs+INhdozDywiiETxOSWnQR6X3WMHdJG6rmB
GKMziv6x+XpyutjZ/9/zWIyLwCsuXASBYvIDkHiXNdrrtMtV5oDVgHgekfmxyDKw
NzVXS0i6JvABEDMu7ywLQ85b4Tq4gpS1R0yn2FgQvb0rfOw9Ng3WYvQRBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMem3kIs7NRntVx1Fiz5jtdgYeA4MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEveDZiZVFpenMxR2UxWEhVV0xQbU8xMkJoNERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudz4MA0G
CSqGSIb3DQEBCwUAA4IBAQCusCrgWVVR/3Gphjr5awvP50IFD4Aw4K+AarGeX7XA
QHPJNErdbKQRJjAHzw48qSRrcrg4MeRJkrW5c5S7K8dZeZQs4x3EfKqyYcrBieUb
iRIBplJu8f27e6SU+qDlgFV5dTzjmR+hGe4mW6qD4Ktq/gyQAPkUeb3SQecUz4TS
GmYIXUJkUQe0ok7Vy/ObYaDYwxWpB0THj+9/zIReFu37UqnFhxGi9NWGcFfuQ/IW
Mhq1mQE9RYO3xfep1ZfnNvulZIEM7hE1mUEqHgVNMUTTqEZLco73MgAOJs6fRN9B
IkI5qjeu2r35uWeTGl+ecNUOcD/OBM+myfOj5uMkLB0y
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:32 2025 by rpki-client